Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
File:                     8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft (raw, json)
Hash identifier:          UL7wVTduyVhlZndZMOM66Jya3uYI47FLTRkchSfoTdE=
Subject key identifier:   7D:88:B9:94:8D:B4:BD:B5:AA:17:12:68:61:81:40:6D:49:CF:EE:36
Authority key identifier: F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C
Certificate issuer:       /CN=f2bffa2742563265037029a78f9317339053009c
Certificate serial:       0194BCA9F01A86D62E2B3B3FDDCE19496A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft
Manifest number:          040B
Signing time:             Fri 31 Jan 2025 14:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:41 +0000
Files and hashes:         1: 8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl (hash: isS/oc8WkqaPprTftVO31r5N7Yy0Dbg/kyhRVkHRhsQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f0:1a:86:d6:2e:2b:3b:3f:dd:ce:19:49:6a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bffa2742563265037029a78f9317339053009c
        Validity
            Not Before: Jan 31 14:00:41 2025 GMT
            Not After : Feb  1 14:00:41 2025 GMT
        Subject: CN=7d88b9948db4bdb5aa1712686181406d49cfee36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d2:17:a3:6e:8b:c0:29:96:3c:3c:a4:d4:e1:
                    1d:6d:58:4b:fe:6b:7e:e9:81:d8:e9:55:bf:fd:62:
                    b2:ae:91:da:50:12:70:f2:53:67:86:7b:82:17:de:
                    33:4d:b5:53:3c:9d:78:71:a0:42:54:2b:c3:a0:f8:
                    b6:6d:25:13:eb:4a:bd:77:d4:d9:72:94:8b:d3:16:
                    f0:58:26:9a:91:1b:70:17:ae:9c:bc:1a:9a:d5:92:
                    53:9f:64:53:15:22:34:32:c0:84:ce:1e:83:fe:48:
                    63:c6:85:32:49:b2:72:a3:4e:39:56:27:65:37:af:
                    a0:24:9c:a2:60:c5:6e:4d:fc:95:3b:98:5f:2c:be:
                    7b:37:47:c9:e8:4b:0f:d1:46:59:bf:11:e0:cd:c6:
                    40:c8:2e:4b:cd:a6:c2:ee:50:6b:44:c9:5c:3a:67:
                    ce:54:56:32:3a:c7:f0:ef:4d:5d:10:d0:61:c9:96:
                    a4:72:7d:a4:55:8d:9e:ff:9d:ac:72:ca:01:96:68:
                    55:2e:69:9a:ed:5a:08:32:9d:d7:67:f3:11:9a:4f:
                    a4:de:b9:2e:0a:25:ec:b4:7e:45:91:8c:51:69:31:
                    72:2d:85:8f:8b:73:9d:c6:76:52:d2:3b:5b:de:ef:
                    49:3e:4a:c0:a8:ad:59:d7:88:17:bd:2b:36:45:e6:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:88:B9:94:8D:B4:BD:B5:AA:17:12:68:61:81:40:6D:49:CF:EE:36
            X509v3 Authority Key Identifier:
                keyid:F2:BF:FA:27:42:56:32:65:03:70:29:A7:8F:93:17:33:90:53:00:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8r_6J0JWMmUDcCmnj5MXM5BTAJw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/95cceb-1928-4166-8c7f-de866fb066d7/1/8r_6J0JWMmUDcCmnj5MXM5BTAJw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:d4:6c:4b:05:65:05:e0:e2:a0:b3:0f:0c:a8:62:8c:08:b3:
         99:6d:64:aa:e7:fb:b4:ab:8e:96:f3:d3:a6:d4:6c:cb:a1:21:
         00:0a:7a:7f:e9:56:93:81:f6:6f:4a:16:58:57:47:f6:78:29:
         55:12:94:3d:21:52:75:f4:91:f7:5f:e8:f4:ec:3a:5a:50:56:
         2c:d5:e0:96:a1:5a:83:fa:52:35:51:92:ec:e4:82:18:34:00:
         f8:ae:54:05:f4:59:5c:35:84:9c:da:a2:fb:4a:23:be:8b:02:
         26:06:ef:5c:f4:7d:53:5e:7e:f0:b4:52:e4:37:cf:5e:d8:06:
         e9:5e:50:4c:90:f0:6f:e2:e7:b1:ec:98:cf:eb:6b:5f:62:b6:
         d9:03:6d:30:0f:bf:2d:ed:99:6b:56:10:1e:a1:18:61:57:60:
         df:35:ba:aa:e8:6c:ee:62:36:de:ce:f8:e4:f3:30:f1:4f:62:
         17:21:cf:71:3c:ed:27:62:0b:ea:f7:fe:02:9e:e4:53:11:cf:
         f0:ab:4f:66:73:33:e1:bc:a8:29:e7:f7:91:bd:89:7a:1d:9d:
         43:f3:f2:e8:a5:69:1c:95:b5:54:71:72:9e:e9:de:b4:f1:6c:
         b8:63:3c:83:30:25:dc:ca:72:b9:43:d5:37:f2:96:ec:d2:a2:
         a2:44:82:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:20 2025 by rpki-client